tettt[.]busines-help-center[.]com

The domain tettt.busines-help-center.com is currently flagged as an active generic phishing site targeting users through a fraudulent Accounts Centre page. Analysis indicates the infrastructure is designed to impersonate Facebook’s authentication portal, likely harvesting credentials or sensitive account information. The domain remains operational, posing an elevated risk to unsuspecting users who may mistake it for legitimate login services. Infrastructure analysis reveals the domain was registered on May 07, 2026, through Gransy, s.r.o., and resolves to the IP address 172.66.0.96, hosted on Cloudflare infrastructure in Canada. The SSL certificate is issued by Google Trust Services (WE1), adding a superficial layer of legitimacy. Security vendor detections on VirusTotal report 20 of 95 engines flagging the domain as malicious. Additionally, the domain appears on one security blocklist, further corroborating its association with phishing activity. Current status confirms the domain remains active, with no evidence of takedown or mitigation at this time. Organizations and users are advised to block the domain and its resolving IP at the network level. Endpoint protection systems should be updated to include this indicator of compromise. Users who may have interacted with the site should immediately reset credentials for any accounts accessed via the fraudulent page and enable multi-factor authentication where available. Monitoring for unusual account activity is strongly recommended.